Spectra 16 channel scan limit HACKED!!!
Posted: Tue Aug 25, 2009 2:26 pm
Yes it has been done! I have figured it out and could not believe how easy it was to do. It is quite easy to do and does NOT involve bit-banging!
I just figured out how to do this a few minutes ago so excuse me if I am to vague on the subject, but here is my tutorial for now. At first, I got a glitch and was able to do this by accident on one zone. Since it happened, I looked into how the RSS handles the Scan number. Read this thread (http://batboard.batlabs.com/viewtopic.php?f=15&t=86921) for more information on how I expected the RSS to work. Turns out I was right! Just a half hour ago, I thought about the memory and how the RSS uses it when running. I remembered a program I used to cheat money in a game, like Sim City, by editing the program memory.
Read on! This is how to do it.
UPDATE: Don't read on, just use this quick guide! https://rapidshare.com/files/3189355479 ... 0Limit.pdf
Ok, first you must do this on a windows PC. The latest Spectra RSS runs on my 1.6GHz PC just fine for editing code plugs. On your DOS machine or whatever, just get the codeplug from the machine you usually edit your codeplug on, and get it on a windows PC to edit.
Then you are going to have to install this program: (http://www.systemsoftlab.com/artmoney731eng.exe) This is the program that edits the memory.
Now start up your RSS. Load your codeplug and go to a scan list (I only tried this with zone scan lists and not scan lists based on channels, but it should be similar).
Notice the amount of channels selected to scan. I am going to assume you are on a scan list that you want to expand, so your scan amount at the top probably says "16 of 16".
Now with the RSS running, open up art money, agree to the terms. Then under "select process", select the SPECTRA program. Then click search. Make sure Exact value is selected, and integer (standard), and address range is ALL.
Now type the value of the modes you have selected to scan for that list. In this example it is all 16, so type in 16 and click search. It will find quite a lot. Now deselect a mode from scanning, to make it "15 of 16". Now go back to art money and click "filter" The point of this is to see what address out of all the searched ones changed from "16" to "15". make sure that Exact Value and Integer (standard) is selected. Now type in the value of the modes selected NOW, in this case "15".
Now it should only find two address. The reason I am having you search is that I am not sure if it is static or not. However, every time I start up the program, Mine are the same address in art money. Mine are 0006A494 and 0006A496. I am wondering what you guys get.
Anyway for me, it didn't matter what one I switched. Now change it to a value of "17". Now go back into RSS and ADD another mode to that Scan list. In this example you should get "18 of 16", which is incorrect. However, if you exit zone scan list and go back into it, it will now read "17 of 16". Select all the modes you want to scan, and as long as you don't go to 16 or below, you will be fine. if you do, just repeat the process.
To do this to other zones, go to that zone scan list and repeat the above, but you probably won't have to search the address again and they should be the same, and now all you have to do in art money is edit the value.
There is one downside. This pretty much eliminates front panel programming of scan list, but ONLY for the zones you exceed this limit on. The radio recognized that you are over. If you go to edit, and try to add another mode, it will say scan list full. If you delete a mode to scan, even if still above 16, the radio will NOT let you add anymore like the RSS can (RSS is easier to trick! ). So if you want to be full proof so you don't accidentally do this, go to Zone options, and go to the zones that you exceed the 16 scan limit on, and set "Non-priority lists" and priority lists" to "Zone Slaved". This will disable front end programming of the scan list for that zone ONLY. You only need to do this to zones that you are expanding.
Ok, ok I know the above is somewhat a mess, but i typed it real quick. Sorry! I will try and create a better tutorial in a PDF format with pictures or something so people that aren't as experienced with windows and memory editing can do this no problem. However, the above explanation can probably be done by most people.
Comments and Questions are welcome!
I just figured out how to do this a few minutes ago so excuse me if I am to vague on the subject, but here is my tutorial for now. At first, I got a glitch and was able to do this by accident on one zone. Since it happened, I looked into how the RSS handles the Scan number. Read this thread (http://batboard.batlabs.com/viewtopic.php?f=15&t=86921) for more information on how I expected the RSS to work. Turns out I was right! Just a half hour ago, I thought about the memory and how the RSS uses it when running. I remembered a program I used to cheat money in a game, like Sim City, by editing the program memory.
Read on! This is how to do it.
UPDATE: Don't read on, just use this quick guide! https://rapidshare.com/files/3189355479 ... 0Limit.pdf
Ok, first you must do this on a windows PC. The latest Spectra RSS runs on my 1.6GHz PC just fine for editing code plugs. On your DOS machine or whatever, just get the codeplug from the machine you usually edit your codeplug on, and get it on a windows PC to edit.
Then you are going to have to install this program: (http://www.systemsoftlab.com/artmoney731eng.exe) This is the program that edits the memory.
Now start up your RSS. Load your codeplug and go to a scan list (I only tried this with zone scan lists and not scan lists based on channels, but it should be similar).
Notice the amount of channels selected to scan. I am going to assume you are on a scan list that you want to expand, so your scan amount at the top probably says "16 of 16".
Now with the RSS running, open up art money, agree to the terms. Then under "select process", select the SPECTRA program. Then click search. Make sure Exact value is selected, and integer (standard), and address range is ALL.
Now type the value of the modes you have selected to scan for that list. In this example it is all 16, so type in 16 and click search. It will find quite a lot. Now deselect a mode from scanning, to make it "15 of 16". Now go back to art money and click "filter" The point of this is to see what address out of all the searched ones changed from "16" to "15". make sure that Exact Value and Integer (standard) is selected. Now type in the value of the modes selected NOW, in this case "15".
Now it should only find two address. The reason I am having you search is that I am not sure if it is static or not. However, every time I start up the program, Mine are the same address in art money. Mine are 0006A494 and 0006A496. I am wondering what you guys get.
Anyway for me, it didn't matter what one I switched. Now change it to a value of "17". Now go back into RSS and ADD another mode to that Scan list. In this example you should get "18 of 16", which is incorrect. However, if you exit zone scan list and go back into it, it will now read "17 of 16". Select all the modes you want to scan, and as long as you don't go to 16 or below, you will be fine. if you do, just repeat the process.
To do this to other zones, go to that zone scan list and repeat the above, but you probably won't have to search the address again and they should be the same, and now all you have to do in art money is edit the value.
There is one downside. This pretty much eliminates front panel programming of scan list, but ONLY for the zones you exceed this limit on. The radio recognized that you are over. If you go to edit, and try to add another mode, it will say scan list full. If you delete a mode to scan, even if still above 16, the radio will NOT let you add anymore like the RSS can (RSS is easier to trick! ). So if you want to be full proof so you don't accidentally do this, go to Zone options, and go to the zones that you exceed the 16 scan limit on, and set "Non-priority lists" and priority lists" to "Zone Slaved". This will disable front end programming of the scan list for that zone ONLY. You only need to do this to zones that you are expanding.
Ok, ok I know the above is somewhat a mess, but i typed it real quick. Sorry! I will try and create a better tutorial in a PDF format with pictures or something so people that aren't as experienced with windows and memory editing can do this no problem. However, the above explanation can probably be done by most people.
Comments and Questions are welcome!